ALT-PU-2023-1992

Высокий

ALT-PU-2023-1992: package sngrep update to version 1.7.0-alt1

Источник

errata.altlinux.org

Дата публикации

14.06.2023

Дата обновления

14.06.2023

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades sngrep to version 1.7.0-alt1.

Устраненные уязвимости3

CVE-2023-31981

Высокий 7.8

Дата публикации: 09.05.2023

CWE-787

Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c.

CVSS 3.1

Высокий 7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector: Local
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Ссылки

CVE-2023-31981 https://nvd.nist.gov/vuln/detail/CVE-2023-31981

Ссылки1

ALT-PU-2023-1992 https://errata.altlinux.org/ALT-PU-2023-1992

Связанные уязвимости

CVE-2023-31981

CVSS3: 7.8

ubuntu

больше 3 лет назад

Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c.

CVE-2023-31981

CVSS3: 7.8

nvd

больше 3 лет назад

Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c.

CVE-2023-31981

CVSS3: 7.8

debian

больше 3 лет назад

Sngrep v1.6.0 was discovered to contain a stack buffer overflow via th ...

GHSA-27pq-ccjc-wxmc

CVSS3: 7.8

github

больше 3 лет назад

Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c.

CVE-2023-36192

CVSS3: 7.8

ubuntu

больше 3 лет назад

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.